Docker

yum install -y yum-utils device-mapper-persistent-data lvm2

yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo

yum -y install docker-ce

sudo mkdir -p /etc/docker
sudo tee /etc/docker/daemon.json <<-'EOF'
{
"registry-mirrors": ["https://gziwmbaz.mirror.aliyuncs.com"]
}
EOF
sudo systemctl daemon-reload
sudo systemctl restart docker

sudo apt-get update

sudo apt-get install apt-transport-https ca-certificates curl software-properties-commo

curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -

sudo add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable"

sudo apt-get update

sudo apt-get install docker-ce

sudo docker run hello-world

#!/bin/bash


#安装网卡转发
echo '---------------------正在安装网卡转发---------------------'

cat <<EOF >  /etc/sysctl.d/docker.conf
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
net.ipv4.ip_forward=1
EOF
sysctl -p /etc/sysctl.d/docker.conf

echo '成功！'

echo '---------------------------查看是否具备基本yum源----------------------'
#查看是否具有yum源
yum clean all && yum repolist
#安装docker yum源
echo '--------------------------即将为你安装docker yum 源---------------------'

curl -o /etc/yum.repos.d/docker-ce.repo http://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
echo '成功！'

#安装指定版本的docker-ce
echo '--------------------即将为你安装docker--------------------------'

yum install -y docker-ce-18.09.9

#设置开机自启并启动docker
systemctl enable docker  
systemctl daemon-reload
systemctl start docker 
if [ $? ];then
exit
fi

#查看docker状态
echo '你的docker状态为:'
systemctl status docker
#即将为你配置docker源加速 如不需要请按 ctrl+z!
echo '================即将为你配置docker源加速 如不需要请按 ctrl+z!=================='

mkdir -p /etc/docker
tee /etc/docker/daemon.json <<-'EOF'
{
  "registry-mirrors": ["https://gziwmbaz.mirror.aliyuncs.com"]    #这里可更改你的加速地址。
}
EOF
systemctl daemon-reload
systemctl restart docker
echo '安装完成！5秒后退出程序！'


# 配置文件
[root@www ~]# cat /usr/lib/systemd/system/docker.service
[Unit]
Description=Docker Application Container Engine
Documentation=https://docs.docker.com
After=network-online.target firewalld.service containerd.service
Wants=network-online.target
Requires=docker.socket containerd.service

[Service]
Type=notify
# the default is not to use systemd for cgroups because the delegate issues still
# exists and systemd currently does not support the cgroup feature set required
# for containers run by docker
ExecStart=/usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock
ExecReload=/bin/kill -s HUP $MAINPID
TimeoutSec=0
RestartSec=2
Restart=always

# Note that StartLimit* options were moved from "Service" to "Unit" in systemd 229.
# Both the old, and new location are accepted by systemd 229 and up, so using the old location
# to make them work for either version of systemd.
StartLimitBurst=3

# Note that StartLimitInterval was renamed to StartLimitIntervalSec in systemd 230.
# Both the old, and new name are accepted by systemd 230 and up, so using the old name to make
# this option work for either version of systemd.
StartLimitInterval=60s

# Having non-zero Limit*s causes performance problems due to accounting overhead
# in the kernel. We recommend using cgroups to do container-local accounting.
LimitNOFILE=infinity
LimitNPROC=infinity
LimitCORE=infinity

# Comment TasksMax if your systemd version does not support it.
# Only systemd 226 and above support this option.
TasksMax=infinity

# set delegate yes so that systemd does not reset the cgroups of docker containers
Delegate=yes

# kill only the docker process, not all processes in the cgroup
KillMode=process
OOMScoreAdjust=-500

[Install]
WantedBy=multi-user.target

systemctl start docker		# 启动
systemctl start docker		# 重启
systemctl stop docker		# 关闭
systemctl enable docker		# 开机启动
systemctl dsiable docker	# 关闭开机启动
systemctl status docker		# 查看状态

docker search			# 从Docker Hub查找镜像
docker images			# 列出所有镜像(images)
docker ps				# 列出正在运行的容器(containers)
docker ps -a			# 列出所有的容器
docker pull images		# 下载centos镜像
docker push images		# 上传镜像
docker top ‘container’	# 查看容器内部运行程序

docker exec -it 			# 容器ID sh	进入容器
docker stop ‘container’		# 停止一个正在运行的容器，‘container’可以是容器ID或名称
docker start ‘container’	# 启动一个已经停止的容器
docker restart ‘container’	# 重启容器
docker rm ‘container’		# 删除容器
docker run -i -t -p :80 LAMP /bin/bash	# 运行容器并做http端口转发
docker exec -it ‘container’ /bin/bash	# 进入ubuntu类容器的bash
docker exec -it /bin/sh		# 进入alpine类容器的sh
docker rm docker ps -a -q	# 删除所有已经停止的容器
docker kill $(docker ps -a -q)	# 杀死所有正在运行的容器，$()功能同``
docker pause CONTAINER 		# 暂停容器中所有的进程。
docker unpause CONTAINER 	# 恢复容器中所有的进程。
docker create CONTAINER		# 创建一个新的容器但不启动它
docker commit				# 从容器创建一个新的镜像。
docker cp					# 用于容器与主机之间的数据拷贝。
docker diff 				# 检查容器里文件结构的更改。

docker login		# 登陆到一个Docker镜像仓库，如果未指定镜像仓库地址，默认为官方仓库 Docker Hub
docker logout		# 登出一个Docker镜像仓库，如果未指定镜像仓库地址，默认为官方仓库 Docker Hub
docker login -u 用户名 -p 密码
docker build -t wp-api .		# 构建1个镜像,-t(镜像的名字及标签) wp-api(镜像名) .(构建的目录)
docker run -i -t wp-api			# -t -i以交互伪终端模式运行,可以查看输出信息
docker run -d -p 80:80 wp-api   # -p镜像端口 -d后台模式运行镜像
docker rmi $(docker images -q)	# 删除所有镜像， -f强制删除
docker rmi $(sudo docker images --filter "dangling=true" -q --no-trunc)	# 删除无用镜像
docker images		# 列出本地镜像。
docker history		# 查看指定镜像的创建历史。
docker tag 			# 标记本地镜像，将其归入某一仓库，原标签，新标签
docker save 		# 将指定镜像保存成 tar 归档文件 -o 输出到文件
docker load			# 导入使用 docker save 命令导出的镜像 -i指定导入的文件
docker import		# 从归档文件中创建镜像，和load几乎没有区别

INSTRUCTION argument 

FROM <image name>

FROM ubuntu

{
    "registry-mirrors": ["<镜像加速器地址>"]
}            

root@node3:~# runlike -p casdoor
docker run --name=casdoor \
	--hostname=5b0a52f375d1 \
	--env='dataSourceName=root:Kaka_2022@tcp(192.168.202.206:32577)/' \
	--env=driverName=mysql \
	--workdir=/ \
	-p 8000:8000 \
	--runtime=runc \
	--detach=true \
	-t \
	casbin/casdoor:20241008-v1.723.0-dirty \
	/docker-entrypoint.sh

root@node3:~# docker inspect casdoor | runlike --stdin -p
docker run --name=casdoor \
	--hostname=5b0a52f375d1 \
	--entrypoint /bin/bash \
	--env='dataSourceName=root:Kaka_2022@tcp(192.168.202.206:32577)/' \
	--env=driverName=mysql \
	--env=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin \
	--env=BUILDX_ARCH=linux_amd64 \
	--workdir=/ \
	-p 8000:8000 \
	--label='MAINTAINER=https://casdoor.org/' \
	--runtime=runc \
	--detach=true \
	-t \
	casbin/casdoor:20241008-v1.723.0-dirty \
	/docker-entrypoint.sh

# docker pull scratch
Using default tag: latest
Error response from daemon: 'scratch' is a reserved name

tar cv --files-from /dev/null | docker import - scratch

import "fmt"

func main() {
	fmt.Println("Hello World")
}

// 编译命令：go build -o hello main.go 
// Docker 是go语言写的，C语言不行，跑的话会报错。

FROM scratch

ADD hello /
CMD ["/hello"]

# docker build -t hello .
[+] Building 23.2s (5/5) FINISHED                                                                                                                            
 => [internal] load build definition from Dockerfile                                                                                                         
 => => transferring dockerfile: 77B                                                                                                                          
 => [internal] load .dockerignore                                                                                                                            
 => => transferring context: 2B                                                                                                                              
 => [internal] load build context                                                                                                                            
 => => transferring context: 2.20MB                                                                                                                          
 => [1/1] ADD hello /                                                                                                                                        
 => exporting to image                                                                                                                                       
 => => exporting layers                                                                                                                                      
 => => writing image sha256:3220ed4b071d30f5c59ffba012b247664b019e8a29f205e6dc6ff91948be21a7                                                                 
 => => naming to docker.io/library/hello    

# docker run --rm hello
Hello World